Static task
static1
Behavioral task
behavioral1
Sample
173aa6ff03bb3f3554963f763e3992cd3eef9db1f99d00ea3e3d67fd5ca16b74.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
173aa6ff03bb3f3554963f763e3992cd3eef9db1f99d00ea3e3d67fd5ca16b74.exe
Resource
win10v2004-20221111-en
General
-
Target
173aa6ff03bb3f3554963f763e3992cd3eef9db1f99d00ea3e3d67fd5ca16b74
-
Size
163KB
-
MD5
aa5e5f6cde872b0dee6c193b6ecc8c9c
-
SHA1
25ae4c0618e0e229649bbe0cfbe1d7ba0a8ce411
-
SHA256
173aa6ff03bb3f3554963f763e3992cd3eef9db1f99d00ea3e3d67fd5ca16b74
-
SHA512
2bf44d2c93dd1da23c604b3ae83f19e2243ef5f94b9d1f12008b154cdfdeb6ef03339e0cafe98a8e531276884d1c6747370073c6eaf378e1c4e8747a90aff117
-
SSDEEP
3072:CvBw2+nm6D2g65Tfct5XMktHM+ylsTQaZLIjV3R28n8F:+x+nd6VctdfulshLUR28ny
Malware Config
Signatures
Files
-
173aa6ff03bb3f3554963f763e3992cd3eef9db1f99d00ea3e3d67fd5ca16b74.exe windows x86
7627e538c73897eb7394598e9bd65281
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
RegisterClipboardFormatW
CharNextExA
IsCharUpperA
CharUpperA
AnyPopup
CreateIconFromResource
DdeInitializeA
ClientToScreen
RegisterWindowMessageA
IsWindowEnabled
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
DefMDIChildProcA
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
ole32
CoUninitialize
OleRegGetMiscStatus
CoInitializeSecurity
CoFileTimeNow
CoSuspendClassObjects
MonikerRelativePathTo
advapi32
RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
comctl32
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
kernel32
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
FlushFileBuffers
GetConsoleMode
HeapReAlloc
HeapAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetConsoleCP
SetUnhandledExceptionFilter
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
VirtualAlloc
CloseHandle
CreateThread
CreateIoCompletionPort
FindNextFileA
DeleteTimerQueueTimer
CopyFileExA
EnumResourceLanguagesW
SetConsoleOutputCP
GetDiskFreeSpaceExA
AreFileApisANSI
GetCommandLineA
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ